Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/28602EEEE80A11EDB6061C7E4AD9E6FC.roa
File: 28602EEEE80A11EDB6061C7E4AD9E6FC.roa (raw, json)
Hash identifier: qfGRYA4oEUWh8zqPVeDgxiEQTcHkLrKgOkFu/1MBdDk=
Subject key identifier: E7:CF:BB:5B:CD:07:F6:C8:1E:D1:CE:3E:71:1B:A2:B2:44:9E:1E:B0
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0A8D
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/28602EEEE80A11EDB6061C7E4AD9E6FC.roa
Signing time: Mon 01 May 2023 10:23:04 +0000
ROA not before: Mon 01 May 2023 10:23:01 +0000
ROA not after: Fri 01 Sep 2023 10:23:01 +0000
asID: 400377
IP address blocks: 161.123.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2701 (0xa8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: May 1 10:23:01 2023 GMT
Not After : Sep 1 10:23:01 2023 GMT
Subject: CN=644f9308-8ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:14:d4:a6:06:bf:65:e1:5d:b7:8e:fa:4d:8c:
83:2e:a0:3f:be:80:6e:85:4e:67:12:2a:45:cc:09:
4f:de:cc:bb:64:87:39:14:d4:f0:51:64:79:ac:31:
40:cf:5f:4a:a0:87:8c:af:53:9a:83:90:aa:17:02:
50:c4:61:a6:54:fa:71:53:d0:21:a0:43:b4:b0:bf:
80:29:c4:1c:f5:ae:ac:f7:5f:7d:a3:e4:a9:4b:2f:
c0:56:2e:99:27:24:94:89:5f:ac:0d:f0:d2:f8:c5:
6b:a2:a8:1d:3f:6d:49:49:35:fc:63:13:88:85:06:
c6:8f:84:a6:52:34:29:f2:9a:6e:75:45:40:52:8a:
09:2f:80:4f:08:64:80:7a:d7:c6:55:01:27:d8:26:
d6:6c:48:f0:8e:f9:af:48:92:82:8e:55:d4:16:35:
a2:b4:1a:87:c6:5f:03:57:73:69:5a:9d:57:31:b3:
99:67:87:2c:95:29:42:0c:bf:76:af:c2:c2:f1:0a:
3d:75:28:8d:9f:08:c4:fa:cb:97:88:f5:17:97:41:
bc:77:81:96:1a:81:fa:40:eb:0d:87:f6:9d:4c:80:
bf:31:5f:72:a7:78:a1:f3:ba:c4:b8:33:ee:ac:04:
3d:7d:92:a5:d4:62:89:0c:e9:c1:a3:d8:e8:fe:72:
28:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CF:BB:5B:CD:07:F6:C8:1E:D1:CE:3E:71:1B:A2:B2:44:9E:1E:B0
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/28602EEEE80A11EDB6061C7E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.240.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:67:1a:29:33:13:35:47:43:8c:26:ac:d5:ac:69:44:20:8c:
35:0e:52:f1:a3:f4:e3:0f:69:a4:12:70:1f:63:12:5a:eb:83:
52:16:b1:1c:4f:eb:2b:9f:2d:a2:f6:d6:70:80:ed:45:a7:96:
49:fa:27:aa:ac:f3:b0:28:6a:df:03:a2:30:60:ed:2a:de:a7:
b4:f3:e3:fa:69:41:70:07:13:0d:42:01:04:4e:64:b6:e8:99:
37:91:7a:62:97:80:6d:63:9c:ee:10:74:b6:39:7a:9a:53:58:
25:ea:eb:05:07:5a:b3:fb:be:77:92:cb:7e:93:19:4c:57:72:
74:b8:56:f2:be:5b:19:09:21:d9:b0:bd:4d:62:cd:ab:54:20:
a3:fd:02:8b:e2:e7:3d:1c:3a:35:da:54:48:4f:34:72:f4:26:
b3:db:45:04:3c:53:27:0d:14:4f:8a:12:37:d0:ff:3c:34:24:
c8:e3:1f:cc:35:ab:90:6d:96:d8:46:f8:6a:6b:6c:7e:5f:bb:
3e:35:21:7a:ad:14:13:63:5e:ef:bd:12:51:53:af:d5:45:b3:
b4:1c:69:ec:32:87:14:13:2b:70:b2:7c:13:ea:9a:93:db:df:
cb:3a:9c:4e:f6:46:6b:3e:5a:df:96:60:08:b8:ac:6e:18:83:
52:bd:66:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org